At NomoTax we take the protection of your data seriously. This policy explains what personal data we process, for what purpose and what rights you have, under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) and, where applicable, Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
1. Data controller
- Owner
- Pablo Pérez del Pulgar Gil
- Trade name
- NomoTax
- Tax ID (NIF)
- 23927599D
- Address
- Ronda Maiols 1, 08192 Sant Quirze del Vallès, Barcelona, Spain
- info@nomotax.io
- Phone / WhatsApp
- +34 642 75 76 33
2. What data we process
- Identification and contact data: full name, email address and phone number.
- Data about your situation: country of residence, nationality, activity, approximate income, companies and any other information you include in the forms or in the documents you send us.
- Data about the appointments you book: date, time slot and format.
- Technical data: the minimum needed for the website to work securely, such as the IP address in server logs.
Please do not include in the forms any data that is not necessary for your query, especially special category data (health, beliefs, etc.).
3. What we use it for
- To handle your queries and requests for information, quotes or bookings (free consultation, tax study, sessions and other services).
- To provide the services you contract and manage the contractual relationship, invoicing and payment.
- To comply with the legal obligations that apply to us, such as tax, accounting or anti-money laundering obligations.
- To send you information about our services, only if you give us your consent or, if you are already a client, about services similar to those contracted, which you can object to at any time.
We do not make automated decisions or create profiles that produce legal effects on you.
4. Legal basis
- Your consent, when you send us a form or a query.
- The performance of a contract or taking pre-contractual steps at your request.
- Compliance with legal obligations.
- Our legitimate interest in informing our clients about similar services.
5. How long we keep it
If you send us a request and do not go on to contract, we will keep your data for as long as needed to handle it and then for a maximum of one year, unless you ask us to delete it sooner. If you are a client, for the duration of the contractual relationship and then for the periods required by the applicable rules (for example, tax or anti-money laundering rules). Data for marketing communications is kept until you withdraw your consent.
6. Who we share it with
We do not sell or pass your data on to third parties. We only share it:
- With public authorities, courts and tribunals when there is a legal obligation.
- To providers who render services to us (web hosting, email, video calls, management tools and Google, whose calendar and Google Meet receive the details of the appointments you book), who act as data processors under contract.
- When the service you contract requires it, and always with your knowledge, with entities in other countries needed to provide it, such as company registries, registered agents, notaries or banks.
7. International transfers
Some of our services, such as forming companies or opening accounts in other countries, require data to be shared with entities in those countries, which may be located outside the European Economic Area. In these cases we apply the safeguards provided for in Chapter V of the GDPR or, where appropriate, the derogations in its Article 49, for example when the transfer is necessary to perform the contract you have requested.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portabilityat any time, and withdraw your consent, by writing to info@nomotax.io and stating the right you wish to exercise.
If you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country of residence.
9. Security
We apply appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access, taking into account the state of the art and the nature of the data.
10. Minors
Our services are aimed at people over 18. We do not knowingly collect data from minors.
11. Changes to this policy
We may update this policy to reflect changes in the law or in our services. We will always publish the current version on this page, with its update date.